⚠️ New Scam Alert: Fake RFQ from “Nyahlane.Mashilo@dcs.gov.za” – RFQ DCS 11-04/2025
South African businesses are once again being targeted by fake RFQs (Request for Quotations) pretending to come from the Department of Correctional Services (DCS). The latest example comes from an email address using the name Nyahlane Mashilo, referencing RFQ Number: DCS 11-04/2025, and requesting a quotation submission.
This is another variation of an ongoing procurement fraud scam that has affected hundreds of companies — and it’s getting more sophisticated.
📧 Example of the Scam Email
Subject: URGENT RFQ: DCS 11-04/2025
Dear Service Provider,
The Department of Correctional Services is requesting your urgent quotation for the supply and delivery of [items not listed in this instance].
All documentation must be submitted to: Nyahlane.Mashilo@dcs.gov.za
Kind Regards,
Nyahlane Mashilo
Supply Chain Management
Drakenstein Management Area
Tel: 021 516 0539
Email: Nyahlane.Mashilo@dcs.gov.za
This appears formal and legitimate, using real DCS regional office names and government-like formatting — but it's likely entirely fraudulent.
🚩 Red Flags That Suggest This is a Scam
| Email address used | While it uses a @dcs.gov.za domain, this can be spoofed or misused. |
| No matching RFQ on eTenders | The reference number DCS 11-04/2025 doesn’t appear on eTenders.gov.za, where all legitimate national tenders should be posted. |
| Urgency with little detail | Government tenders typically have detailed specs and longer deadlines, not vague “urgent” notices. |
| Unknown contact | A search for “Nyahlane Mashilo” on the DCS website or Google returns no confirmed employment record. |
| Similar format to known scams | This mirrors previous fraudulent tenders involving “Ada Plug,” “Mishack Ndlovu,” and “Lukas Kruger.” |
🧠 How These RFQ Scams Work
These procurement scams follow a familiar pattern:
-
You receive an RFQ email referencing a realistic-sounding bid number and DCS office.
-
You're asked to submit:
-
A formal quotation
-
CSD registration
-
B-BBEE documents
-
Bank letter
-
Company registration
-
-
Next steps (once you submit):
-
You may receive a fake purchase order
-
You’re told to send a sample or make a delivery to a fake DCS depot
-
You might even be tricked into paying a “delivery fee” or courier
-
No order is ever fulfilled, and by the time you realize, the contact has gone silent.
🛡️ Protecting Your Business: What To Do
✅ ALWAYS VERIFY TENDER NUMBERS
Search the reference (e.g., DCS 11-04/2025) on eTenders.gov.za. If it’s not there, it’s likely fake.
✅ DO NOT SEND DOCUMENTS
Do not send company info or banking details to unverified email addresses, even if they appear to be official.
✅ CALL DCS HEAD OFFICE
Instead of calling the number in the email, independently verify through DCS at www.dcs.gov.za or contact their National Office directly.
✅ Check Sender Identity
Search for the name (e.g., Nyahlane Mashilo) on LinkedIn, the DCS website, or company databases. Most scammers use fake names.
✅ Mark and Report the Email
Flag the email as phishing. Report it to:
-
fraud@treasury.gov.za
-
Anti-Corruption Hotline: 0800 701 701
-
Your nearest SAPS cybercrime office
🏷️ Suggested Tags & Keywords
#ScamAlert #FakeRFQ #TenderFraud #DCSScam #ProcurementFraud #SouthAfricaBusinessScam #NyahlaneMashiloScam #eTendersVerification #BusinessFraudPrevention
💬 Other Known Fake Contacts in Similar Scams
Scammers reuse similar naming patterns across their fake RFQs:
| Ada Plug | Ada.Plug@dcs.gov.za | Fake |
| Mishack Ndlovu | Mishack.Ndlovu@dcs.gov.za | Fake |
| Lukas Kruger | Lukas.Kruger@dcs.gov.za | Fake (reply-to) |
| Nyahlane Mashilo | Nyahlane.Mashilo@dcs.gov.za | Likely Fake |
These are often attached to false tenders for solar lights, fingerprint scanners, UPS batteries, or biometric devices.
📸 Consider Adding Visual Warnings
Want to warn others in your network? I can create an infographic or alert image showing:
-
A sample of the fake RFQ
-
Red flags to watch for
-
Steps for verifying tenders
Just upload the email or let me know what you'd like included.
🔑 Key Takeaways
-
All national RFQs must be published on the eTenders Portal — if you can’t find the RFQ number, assume it’s suspicious.
-
Scammers target real businesses with fake “urgent” quotes hoping to steal goods, personal data, or payments.
-
Even legitimate-looking emails with @gov.za domains can be faked or hijacked.
-
If in doubt, call the department directly using verified numbers.
✉️ Have You Received Similar Emails?
If you or your company have received emails from:
Please share them (you can upload screenshots here). We can help analyze and warn others through a growing database of fake RFQs.










